Repository navigation
Conversation
在 webpack.config.v3.js 的两个 CSS Modules 规则中增加 namedExport: false， 恢复 styles 默认导出以兼容 frontend 的 import styles from '*.css' 语法， 消除 build-src 中全部 300+ 条 export default was not found 警告。
…ies 冲突 删除 .npmrc 中的 legacy-peer-deps=true， 在 package.json 中配置 overrides 强制所有依赖统一采用根项目的 react 和 react-dom 版本， 解决 light-ui、rc-times、react-async-component 等旧依赖声明 react 16 peer 的冲突， 实现标准 npm install 干净通过。
1. 升级可安全演进的直接依赖： - autoprefixer: ^7.2.5 -> ^10.4.20 - isomorphic-fetch: ^2.2.1 -> ^3.0.0 - chart.js: 2.4.0 -> ^2.9.4 - highcharts: ^8.2.0 -> ^11.4.9 - @sentry/browser: ^4.5.2 -> ^7.120.3 - compression-webpack-plugin: ^11.1.0 -> ^12.0.0 - postcss-reporter: ^5.0.0 -> ^7.1.0 - eslint-import-resolver-webpack: ^0.8.4 -> ^0.13.11 - koa-session: ^6.4.0 -> ^7.0.2 - phantom: ^4.0.1 -> ^6.3.0 2. 针对深层传递依赖，在 overrides 中配置安全版本锁： - validator, lodash, json5, xml2js, serialize-javascript, semver, tough-cookie, qs, tar, form-data, uuid, extract-zip 3. 漏洞数从 46 个（8 critical / 20 high）大幅下降至 16 个（无法升级的均为已归档或停止维护的 request/phantomjs/mq-utils/rsmq 闭环依赖）。
1. 移除彻底未使用的死依赖 stackimpact（其 postinstall 在 Node 22 下因找不到 ABI 且缺失 Python 触发 node-gyp 原生编译失败）； 2. 移除 overrides 中导致破坏旧依赖子路径/回调签名的 uuid 和 extract-zip 强制锁定； 3. 更新 package-lock.json，实现从零干净安装通过，npm audit 漏洞数进一步降至 15 个。
…serHistory 1. 修复 react-router 5 移除 browserHistory 导出导致的 Webpack 构建警告； 2. 统一使用 history 库的 createBrowserHistory 实例，使 ConnectedRouter 与 Redux routerMiddleware 共享单例； 3. 消除 build-src 中 export 'browserHistory' was not found 警告。
1. 新增 config/production.json 生产配置：启用 SQLite 本地存储、内存缓存与本地 OSS 驱动，监听 4000 端口； 2. 修复 koa-router 14 升级后 router 必须通过 new koaRouter() 实例化的运行时异常； 3. 为 xmlbuilder 依赖单独配置 lodash 3.x override，消除旧模块加载异常； 4. 编写幂等的一键部署与健康检查脚本 scripts/deploy-local.sh，支持 tmux 常驻守护； 5. 更新 README.md 添加本机部署指引章节。
1. 支持邀请码 + 邮箱 + 账号密码注册与本地登录： - 数据库新增 invite_codes 表与 users 表 email、password_hash 等扩展 - 实现加盐 scrypt 密码哈希与唯一性格式校验 - 提供前端登录与邀请码注册弹窗交互 2. 修复个人主页/Dashboard 白屏问题： - 将废弃且导致客户端 ReferenceError: System is not defined 的 System.import 全量替换为现代标准动态 import() - 确保 Webpack 5 正确生成并异步加载 Dashboard 各子模块 chunk
fix: protect private resume access
…ialization fix: initialize monthly commit totals before addition
…nguages fix: exclude unknown repository languages from ranking
Replace obsolete PhantomJS rendering with headless Chromium over CDP, render against loopback, and ship Chromium in the Docker image so production downloads work again.
fix: restore resume PDF download with Chromium
fix: scope resume queries to their owner
fix: secure local image uploads
fix: protect resume downloads and redact tokens Resolves merge conflict with Chromium resume PDF download (#7) and integrates: - Safe PDF downloads from non-public data directory with owner verification - Redacting downloadToken in logs and error notifications - Excluding query strings and sensitive bodies from loggers - Ceasing upload of rendered PDFs to public object storage
Remove card shadow/margins in download mode and size one-page PDFs from flattened content to avoid a blank second page. Show multi-resume action tipso below buttons so overflow no longer clips them.
fix: polish resume PDF export and multi-resume tipso
…phy with feature items
- add zhihu-oauth and google-oauth service clients - add oauth_identities table to persist provider bindings - implement oauth login handlers, state validation, and routes in user controller - add Zhihu and Google login action buttons to frontend login page - add comprehensive integration tests covering Zhihu and Google OAuth flows
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.